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Abstract.  We  propose  a  correlation-based  digital  watermarking  tech¬ 
nique  for  robust  image  pattern  authentication.  We  hide  a  phase-based 
signature  of  the  image  back  into  its  Fourier  magnitude  spectrum  in  the 
embedding  stage.  The  detector  computes  the  Fourier  transform  of  the 
watermarked  image  and  extracts  the  embedded  signature.  Authentica¬ 
tion  performance  is  measured  by  a  correlation  test  of  the  extracted  sig¬ 
nature  and  the  signature  computed  from  the  watermarked  image.  The 
quality  of  the  watermarked  image  is  obtained  from  the  peak  signal-to- 
noise  ratio  metric.  We  also  furnish  simulation  results  to  show  the  robust¬ 
ness  of  our  approach  to  typical  image  processing  as  found  in  JPEG 
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1  Introduction 

The  rapid  growth  of  multimedia  applications  has  attached 
critical  importance  to  digital  pattern  recognition  and  re¬ 
trieval  techniques.  The  spectacular  surge  of  internet-based 
applications  has  made  the  problem  even  more  challenging 
due  to  the  inherent  threats  and  vulnerabilities.  Data  over 
networks  are  constantly  subject  to  active  attacks  such  as 
blocking,  spoofing,  and  tampering.  Transmission  and  distri¬ 
bution  of  images  over  the  internet,  therefore,  necessitates 
the  authentication  and  integrity  of  digital  media,  in  addition 
to  the  usual  quality-of- service  requirements.  In  this  paper, 
we  address  this  problem  of  self-authentication  of  digital 
image  transmission  using  a  signature-based  information¬ 
hiding  technique. 

Authentication  in  cryptography  has  been  addressed  by 
attaching  a  digital  hash-based  signature  to  the  message  data 
during  transmission  and  then  comparing  the  computed  and 
extracted  signatures1  in  the  receiver.  An  image  signature, 
on  the  other  hand,  is  an  identifier  of  an  image  obtained 
from  inherent  features  of  the  image,  which  can  similarly  be 
used  for  image  authentication.  Unlike  digital  signatures, 
though,  image  signatures  are  usually  computed  from  some 
content-dependent  features  of  the  image.2  Image  authenti¬ 
cation  typically  involves  hiding  this  signature  in  the  host 
image  using  a  digital  watermarking3  technique.  Depending 
on  the  application,  a  watermark  can  be  fragile,  semifragile , 
or  robust.  Most  of  the  image  authentication  techniques  pro¬ 
posed  are  semifragile,4,5  in  the  sense  that  they  are  vulner¬ 
able  to  some  malicious  tampering,  while  at  the  same  time 
they  tolerate  some  desirable  nonmalicious  image  modifica¬ 
tion,  such  as  JPEG  compression.  There  are  other  techniques 
as  well  that  make  use,  with  varied  success,  of  variants  of 
content-based  extracted  signatures  such  as  robust 
watermarks,6  fragile  watermarks,7  and  also  hybrid 
watermarks.8  However,  all  the  techniques  heavily  depend 


on  the  appropriate  choice  of  signatures.  In  a  related  ap¬ 
proach  in  optics,  significant  research  has  been  done  in  op¬ 
tical  security  and  authentication  systems  using  variants  of 
phase  encoding9  and  Fourier  plane  encoding19  techniques. 
The  downside  of  all  these  approaches  is  that  the  transmitted 
images  are  usually  complex-valued,  hence  necessitating 
bandwidth-intensive  transmission.  Also,  some  of  these 
techniques  require  a  reference  image,  which  is  often  not 
available  in  a  distributed  system.  Our  method  makes  use  of 
a  correlation-based  signature  to  produce  a  semifragile  wa¬ 
termark  for  authentication  applications.  More  precisely,  we 
use  the  binary  phase-only  filter  (BPOF) 11,12  of  the  original 
image  for  our  signature,  which  is  used  in  a  self¬ 
authentication  scenario  that  does  not  necessitate  the  trans¬ 
mission  of  the  reference  pattern. 

Section  2  describes  one  particular  motivation  for  our 
phase-based  approach,  followed  by  the  watermarking  pro¬ 
cedure  in  Sec.  3.  Simulation  results  are  furnished  in  Sec.  4. 

2  Motivation 

Since  the  fragility  of  the  signature  depends  on  the  fragility 
of  the  selected  features,  it  is  crucial  to  select  good  features. 
Our  choice  of  signatures  in  embedding  is  motivated  by  the 
desire  for  correlation-based  recognition  in  the  detector. 
Correlation-based  pattern  recognition  is  a  rich  and  estab¬ 
lished  area  in  optical  information  processing.  Whether  it  is 
matched  filtering  or  a  joint  transform  correlation  setup,  a 
reference  filter  is  first  computed  from  the  given  image(s).  It 
is  then  correlated  with  the  test  image  to  determine  detector 
recognition.  Often  the  reference  filter  is  not  available.  This 
is  especially  true  for  internet-based  transmission  and  distri¬ 
bution  of  digital  media.  Consequently,  in  this  paper  we  pro¬ 
pose  a  self-recognition  or  self- authentication  technique, 
where  the  reference  image  is  embedded  in  the  host  image  in 
a  manner  such  that  the  quality  of  the  host  is  only  trivially 
degraded,  while  at  the  same  time  the  embedded  information 
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Fig- 1  The  BPOF-based  embedding  method. 


can  be  extracted  to  perform  correlation  tests  for  recognition 
and/or  authentication.  Our  method  also  prevents  spoofing 
of  this  embedded  information. 

The  binary  phase-only  filter  (BPOF)  proposed  indepen¬ 
dently  by  two  research  groups11,12  has  demonstrated  opti¬ 
mal  correlation  performance,  while  at  the  same  time  satis¬ 
fying  storage  and  computational  efficiency  requirements.  In 
a  related  as  investigation,  variants  of  phase-only  filters 
were  also  shown  to  be  good  features  for  pattern  recognition 
applications.13  In  addition,  the  phase  quantization  in  the 
BPOF  has  built-in  tolerance  to  minor  changes  to  the  image, 
which  is  a  desirable  aspect  for  a  semifragile  image  authen¬ 
tication  watermark.  For  these  reasons,  we  propose  to  use 
the  BPOF  as  a  signature  of  the  image,  which  will  subse¬ 
quently  be  hidden  as  the  watermark  signal. 

3  The  Watermarking  Process 

Figure  1  shows  the  flow  chart  of  the  watermark  embedding 
process.  The  original  image  is  transformed  from  the  spatial 
domain  to  the  frequency  domain  via  the  discrete  Fourier 
transform  (DFT).  Consider  an  MXN  original  image 
h(m,n ),  where  m,  n  are  the  spatial  indices.  The  DFT  of 
h(m,n )  is  written  as  H(u,v ),  where  u ,  v  represent  the 
spatial  frequency  coordinates: 

H(u,v)=X(u,v)exp[j  (f>(u,v)].  (1) 

Here,  X(u,v)  is  the  magnitude  of  the  frequency  coefficient, 
\H(u,v)\,  and  <fi(u,v)  is  the  phase  part  of  the  frequency 
H(u,v ),  given  in  the  standard  manner  as  follows: 

4>(u,v)  is  the  unique  angle  in 

( —  77, 7r]  such  that  Eq.  ( 1 )  is  true.  (2) 

In  our  watermarking  method,  the  phase  is  kept  un¬ 
changed  but  the  magnitude  X(u,v )  is  modulated.  The  real¬ 
valued  X(u,v)  array  is  first  transformed  to  an  integer¬ 
valued  array  by 

R(u,v)  =  roxmd(X(u,v)).  (3) 

The  round  (•)  function  rounds  the  operand  to  the  nearest 
integer  value,  which  can  be  represented  by  a  fixed  number 
q  of  bit  planes.  Hence,  writing  in  a  bit  slice  format,  we  have 

R  =  Rq-i,  Rq- 2 , _ ,/? i ,  R0,  where  Rt  is  the  ith  bit  plane 

of  the  rounded  magnitude. 

The  second  input  to  the  bit-plane  embedder  is  the  BPOF, 
which  is  obtained  by  first  binarizing  the  phase-only  filter 
according  to  the  following  schedule: 


[  +  1  if  cos  <fi(u,v)^ 0, 

b(u,v)  =  \  .  (4) 

I  —  1  otherwise. 

(At  this  stage  we  have  therefore  a  bipolar  binary  image  of 
the  original  image,  which  has  been  shown  to  possess  a 
number  of  discriminatory  features  of  the  original 
image.11,12)  Next  we  map  this  {+1,-1}  pattern  respectively 
to  a  unipolar  binary  pattern  {1,0},  which  is  equivalent  to  a 
1-bit  phase  quantization.  We  denote  this  unipolar  array  as 
B(u,v),  and  it  is  our  BPOF. 

As  shown  in  Fig.  1,  the  embedding  box  now  has  two 
inputs — the  rounded  magnitude  spectrum  of  the  original 
image  [R(u,v)],  and  the  BPOF  signature  B(u,v).  In  order 
to  employ  bit-plane  embedding,  we  need  to  decide  which 
bit  plane(s)  will  be  modified  and  how.  (Depending  on  the 
desired  robustness,  more  than  one  bit-plane  may  also  be 
modified.  However,  we  do  not  discuss  that  possibility  in 
this  paper.)  This  decision  is  to  be  made  from  an  optimal 
trade-off  of  the  quality  degradation  of  the  image  and  the 
robustness  of  the  embedded  signal,  which  suggests  one  of 
the  mid-level  bit  planes  may  work  best.  In  the  results  sec¬ 
tion,  we  show  how  we  came  up  with  a  good  formulation  of 
this  choice.  For  now,  it  suffices  to  specify  a  particular  bit 
plane  w.  The  following  equation  then  captures  how  this 
selected  plane(s)  is  modified: 

R(u,v)  =  C(u,v)*B(u,v).  (5) 


Here  •  denotes  an  invertible  logical  operation  on  the  BPOF 
signature  bit  plane  B(u,v )  and  any  other  bit  plane  C(u,v) 
of  R.  Note  that  the  BPOF  signature  has  the  same  symmetry 
aspects  as  the  magnitude  bit  planes  (from  the  properties  of 
the  discrete  Fourier  transform).  The  •  operation  must  re¬ 
spect  that  symmetry.  The  •  operation  we  used  in  our  experi¬ 
ments  was: 

1.  First  encrypt  B(u,v ),  yielding  EB(u,v ),  with  a 
nonavalanche1  encryption  that  respects  the  symmetries  of 
B(u,v ),  and  then 

2.  pick  a  w  out  of  {0,...,g—  1},  and  set  C(u,v ) 
equal  to  the  wth  bit  plane  of  R  =  Rq_i,  Rq-2,...,R\ ,  Ro- 

3.  Replace  the  wth  bit-plane  C(u,v)  of  the 
rounded  magnitudes  with  the  EB(u,v). 

This  results  in  a  modification  of  the  rounded  bit  planes 
from  Rq-i,  Rq- 2,...,Rl9  R0  to  Rq-\  ,...,RW+1 ,  EB(u,v ), 
Rw-i,...,R0.  We  designate  the  modified  rounded  magni¬ 
tudes  as  R(u,v).  (Note  that  other  choices  of  •  are  plausible, 
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provided  they  respect  the  symmetry.*)  Note  that  encryption 
is  used  to  prevent  spoofing.  We  then  multiply  the  integer 
R(u,v )  by  exp {j<fi(u,v)\  to  form  H(u,v ),  thus  modifying 
the  frequency  representation  of  the  original  image: 

H(u,v)  =R(u,v)exp[j  (f>(u,v)~\.  (6) 

Next  we  apply  the  inverse  discrete  Fourier  transforma¬ 
tion  to  Eq.  (6)  to  obtain  the  marked  image.  This  will  be  a 
real- valued  matrix  with  some  of  the  values  falling  outside 
the  range  {0,...,255}.  Therefore  rounding,  clamping,  and 
clipping  operations  are  performed  on  the  marked  image, 
resulting  in  the  final  watermarked  image  hw(m,n),  which 
is  representable  as  an  unsigned  8-bit  gray  value.  (One  can 
also  use  the  same  method  for  color  images  by  modifying 
only  the  Y  values.)  These  operations,  along  with  the  subtle 
change  of  the  rounded  magnitudes,  cause  the  watermarked 
image  to  differ  slightly  from  the  original  image. 

Optics-based  authentication  systems,  where  the  water¬ 
marked  image  is  usually  a  complex  image,  are  obviously 
unsuitable  for  our  needs.  One  of  our  requirements  is  to  send 
a  true  image  that  is  visually  indistinguishable  from  the 
original  image. 

The  detection  process  includes  the  extraction  of  the  sig¬ 
nature  and  a  subsequent  correlation  operation.  We  start  with 
a  test  image  t(m,n).  The  discrete  Fourier  transform  of  this 
yields 

T(u,v)  =  \T(u,v)\exp[j  cf>T(u,v)].  (7) 

After  a  rounding  operation  on  magnitude  coefficients,  we 
extract  the  candidate  hidden  signature  Br  by  undoing  the 
operation  •  in  Eq.  (5).  B ’  is  then  converted,  in  the  obvious 
way,  to  the  bipolar  binary  form  {— 1,  +  1}  designated  as  br . 
Of  course,  as  yet  we  do  not  know  if  b'  is  a  valid  signature 
from  a  legitimate  watermarked  image,  or  noise  from  an 
un watermarked,  or  modified,  image.  This  is  why  we  refer 
to  it  as  a  candidate  signature.  Therefore,  we  must  perform 
tests  to  check  the  validity  of  b'  as  a  valid  watermark  sig¬ 
nature.  We  do  this  by  a  correlation  test. 

We  correlate  the  candidate  signature  b'  against  phase 
information  from  t(m,n).  The  motivation  behind  this  is 
that  if  t(m,n)  were  a  watermarked  image,  the  watermark¬ 
ing  process  was  designed  so  that  magnitudes  would  be 
changed,  but  not  phases.  Of  course,  there  are  some  minimal 
effects  on  the  phase  due  to  rounding,  clipping,  clamping, 
and  also  sometimes  compression  (if  the  image  is  stored  as  a 
JPEG).  Correlation  tests,  though,  should  show  a  linkage  of 
the  candidate  signature  with  the  phase  information  from 
t(m,n).  Our  experiments  show  that  this  is  true.  From 


*If  the  operator  is  XOR  and  C(u,v )  is  an  all-zero  bit  plane,  then  the 
embedding  is  simply  equivalent  to  replacing  the  selected  bit  plane  with 
the  signature  plane.  In  another  scenario,  if  the  operation  is  XOR  and 
C(u,v)  =  Ri(u,v),  and  furthermore  the  signature  does  not  degrade  much, 
then  Eq.  (5)  can  be  used  to  retrieve  the  original  bit  plane  and  thus  the 
original  image.  This  is  an  example  of  reversible  watermarking.  In  yet 
another  realization,  C(u,v )  may  represent  any  bit  plane  other  than  the 
embedding  plane,  which  gives  an  additional  degree  of  security. 


Fig.  2  (a)  The  original  “Peppers”  image,  (b)  the  BPOF  signature,  (c) 
the  watermarked  image,  and  (d)  the  difference  between  original  and 
watermarked  image  (visually  enhanced). 


t(m,n)  the  phase  information  (fiT(u,v )  is  extracted.  This  is 
used  to  form  a  POF  of  t(m,n).  The  POF  is  computed  as 

TPOF(u,v)  =  exp[-j(f>T(u,v)].  (8) 

It  is  well  known  that  the  correlation  of  two  spatial  im¬ 
ages  is  given  by  the  inverse  discrete  Fourier  transform 
(FT-1)  of  the  term-by-term  product  of  the  discrete  Fourier 
transform  of  one  image  with  the  conjugate  [hence  the  nega¬ 
tive  sign  in  Eq.  (8)]  discrete  Fourier  transform  of  the  other 
image.  We  wish  to  see  how  similar  the  candidate  water¬ 
marked  image  is  to  the  original  image;  thus  we  would  like 
to  do  an  autocorrelation  test.  Unfortunately,  we  do  not  have 
the  original  image;  we  only  have  the  watermarked  image. 
However,  we  have  hidden  and  extracted  (up  to  noise  from 
rounding  and  compression)  the  BPOF  of  the  original  image 
in  the  watermarked  image.  Therefore,  based  upon  this  and 
the  already  mentioned  references  on  Fourier  optics  (espe¬ 
cially  Ref.  12),  we  propose  the  following  as  our  correlation 
test  for  detection:  We  define  the  correlation  function  Corr 


Corr(w,u)  =  FT  1(TPOF(u,v)*bf  (u,v)).  (9) 

The  correlation  peak  determines  the  degree  of  authenticity. 
We  also  use  a  few  other  metrics  from  the  correlation  plane 
to  demonstrate  the  detector  performance,  which  is  enumer¬ 
ated  in  the  next  section. 

4  Simulation  and  Results 

Simulation  of  the  above-mentioned  algorithm  is  performed 
on  two  sets  of  images  obtained  from  the  USC  SIPI 
Database.14  The  first  set  contains  ten  256X256  images, 


Of  course,  Corr  is  actually  a  function  of  ( u,v ).  Sometimes  we  suppress 
that  in  our  notation  for  the  sake  of  convenience. 
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Fig.  3  Trade-off  between  the  perceptual  quality  and  robustness  for 
“Peppers.” 


while  the  second  set  has  fifteen  different  512X512  images. 
There  is  a  mix  of  natural,  aerial,  texture,  and  motion  frame 
images  in  these  sets.  Note  that  some  of  the  images  are  color 
images  that  we  converted  to  grayscale  in  the  standard  man¬ 
ner.  Although  our  algorithm  is  equally  applicable  to  color 
images,  the  results  furnished  in  this  section  are  obtained 
from  watermarking  the  intensity  images  only. 

Figure  2  shows  the  original  512X512  grayscale  “Pep¬ 
pers”  image  (a),  its  BPOF  signature  (b),  the  watermarked 
image  (c),  and  the  difference  between  the  marked  and  un¬ 
marked  images  in  (d)  (which  appears  as  noise). 

Watermarking  algorithms  typically  make  a  trade-off 
among  a  number  of  performance  parameters  such  as  robust¬ 
ness,  perceptual  quality,  assurance,  and  detectibility.  As  for 
robustness,  watermarks  can  be  made  very  robust,  but  the 
resulting  perceptual  quality  degradation  of  the  image  may 
make  it  useless.  In  order  to  compare  the  perceptual  quality 
objectively,  we  use  the  widely  used  peak  signal-to-noise 
ratio  (PSNR). 

In  the  current  work,  authentication  of  a  watermarked 
image  is  used  as  measure  of  assurance;  this  in  turn  is  mea¬ 
sured  by  the  degree  of  correlation  of  the  extracted  signature 
with  the  computed  phase  signature.  Let  Pmax  and  Psecond 
denote  the  highest  and  the  second  highest  peaks  of  the  cor¬ 
relation  plane,  respectively,  as  obtained  from  Eq.  (9).  Note 
that  the  second  highest  peak  is  usually  calculated  excluding 
a  small  (3X3  to  7X7)  pixel  area  centered  on  the  highest 
peak.  Let  /z  be  the  average  value  of  the  entire  correlation 
plane.  The  first  metric  is  the  ratio  of  the  peak  to  average 
correlation  energy  (PACE).15  This  is  a  measure  of  the 
sharpness  of  the  peak.  We  calculate  this  ratio  in  decibels  by 
expressing  it  as 


Fig.  4  Correlation  output  for  (a)  watermarked  image,  (b)  unmarked 
image. 


PACE=  20  log10|  .  (10) 

Next  we  calculate  the  peak- to- secondary-peak  ratio  (PSR), 
given  by 


PSR  =  20  logjof  it"— “I  •  (ID 

\  ^second/ 

This  is  a  measure  of  the  prevalence  of  false  positives  in  a 
detection  algorithm.  A  higher  PSR  value  indicates  a  false 
positive  is  less  likely. 

Robustness  of  our  method  depends  on  the  location  of  the 
embedding  bit  plane(s)  and  the  number  of  bit  planes  being 
modified.  For  the  results  to  follow,  as  discussed  earlier,  we 
only  use  one  bit-plane  embedding.  Therefore,  the  embed¬ 
ding  strength  is  directly  proportional  to  the  location  of  the 
bit  plane  modified.  In  Fig.  3,  the  v  axis  represents  which  bit 
plane  C(u,v)  is  [see  Eq.  (5)]. 

In  order  to  select  this  optimal  bit  plane,  we  ran  a  simu¬ 
lation  to  obtain  a  relation  of  embedding  strength  versus 
detector  performance  metrics.  Figure  3  shows  this  relation¬ 
ship  for  embedding  planes  9  to  16  of  the  512X512  “Pep¬ 
pers”  image.  The  total  number  of  bit  planes  in  this  case  was 
25.  Note  the  monotonic  decrease  of  the  image  quality 
(PSNR)  with  increasing  embedding  strength.  The  correla¬ 
tion  metric  PACE  achieves  a  slight  maximum  at  bit  plane 
13,  while  dropping  down  on  each  side.  This  is  interesting. 
For  a  low  embedding  strength  the  extracted  signature  is 


(a) 


(b) 


Marked  Image 


. » . Unmarked  Image 


Image  No. 


-♦—Marked  Image 
Unmarked  Image 


Image  No. 


Fig.  5  Correlation  performance  for  image  set  1 :  (a)  PACE,  (b)  PSR. 
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noisier  than  the  computed  one.  For  a  high  embedding 
strength,  the  computed  one  is  noisier  than  the  extracted 
one.  Therefore,  in  either  case  the  correlation  becomes 
noisier  and  so  do  the  metrics.  A  similar  trend  is  also  ob¬ 
served  for  the  second  correlation  metric  PSR.  This  experi¬ 
ment  (done  on  “Peppers”  and  other  images)  shows  that  an 
optimal  trade-off  value  for  a  selected  bit  plane  i  from  a  total 
of  q  planes  is  given  by 


q+ 1 

2 


(12) 


(a) 


Image  No. 


Using  this  relation  in  the  Fig.  3  experiment,  where  the  total 
number  of  bit  planes  was  25,  we  find  that  i  =  13  is  the 
selected  bit  plane.  For  all  the  remaining  experiments,  ex¬ 
cept  where  noted,  we  use  Eq.  (12)  to  determine  the  selected 
bit  plane. 

Next,  we  look  closely  at  the  detector  performance.  Fig¬ 
ure  4  shows  the  correlation  of  the  extracted  signature  and 
the  POF  of  the  test  image.  (Of  course,  we  are  now  illustrat¬ 
ing  the  correlation  with  the  standard  convention  of  negative 
frequencies  in  order  to  put  the  “action”  in  the  middle  of  the 
image.)  If  the  test  image  is  a  marked  image,  we  obtain  a 
sharp  correlation  as  shown  in  Fig.  4(a).  For  an  unmarked 
image,  the  peaks  appear  random  and  there  is  no  sharp  cor¬ 
relation  peak,  as  evident  from  Fig.  4(b). 

We  perform  the  simulation  for  the  two  sets  of  images 
and  record  the  performance  metrics  as  in  Eqs.  (10)  and 
(11).  Figure  5(a)  shows  the  PACE  values  for  marked  and 
unmarked  images  for  all  ten  256X256  images.  There  is 
clear  separation  between  them,  and  it  is  obvious  that  we 
can  set  a  threshold  that  will  authenticate  a  marked  image 
from  an  unmarked  one.  Figure  5(b)  shows  the  correspond¬ 
ing  result  for  PSR  values.  The  separation  is  even  greater 
here,  which  implies  a  highly  unlikely  false-positive  prob¬ 
ability  in  the  authentication  test.  Note  that  in  calculating  the 
second  highest  peak  (needed  to  calculate  PSR),  we  ex¬ 
cluded  a  3  X  3-pixel  area  centered  on  the  highest  peak. 

Figures  6(a)  and  6(b)  show  the  corresponding  metrics 
for  set  2  images.  Note  that  the  separation  between  the  cor¬ 
relation  metrics  of  the  marked  and  unmarked  images,  in 
general,  is  even  more  pronounced  here.  This  characteristic 
difference  is  primarily  coming  from  the  larger  correlation 
plane  (512X512  as  opposed  to  256X256)  in  the  case  of 
Fig.  6.  This  also  shows  that  our  method  yields  better  results 
with  larger  images. 


1  3  5  7  9  11  13  15 


Image  No. 


Fig.  6  Correlation  performance  for  image  set  2:  (a)  PACE,  (b)  PSR. 


Let  us  now  discuss  the  robustness  of  our  semifragile 
watermarking  method  against  some  desirable  image  pro¬ 
cessing.  Figures  7(a)  and  7(b)  show  the  difference  images 
between  the  original  and  the  watermarked  image  (accentu¬ 
ated  for  visibility)  for  “Peppers.”  Note  that  this  result  is 
obtained  from  a  very  high  embedding  strength  that  is  usu¬ 
ally  not  used  for  typical  applications.  But  it  demonstrates 
one  important  aspect  of  the  algorithm — that  is,  the  embed¬ 
ding  is  context-sensitive.  That  means  that  removing  our 
watermark  will  also  degrade  the  quality  of  the  original  im¬ 
age  seriously.  This  is  in  sharp  contrast  with  the  algorithm 
shown  in  Ref.  9,  where  the  difference  image  is  random. 

With  this  result  in  mind,  we  now  look  into  the  robust¬ 
ness  of  our  algorithm.  Simulation  results  have  shown  that 
the  algorithm  has  some  built-in  robustness  against  JPEG 
compression,  Gaussian  filtering,  image  enhancement,  and 
cropping  (to  a  certain  degree).  We  furnish  JPEG  compres¬ 
sion  performance  results  because  this  is  often  a  necessary 
form  of  image  degradation  that  may  affect  the  watermark. 


Fig.  7  Difference  images  with  (a)  15th-  and  (b)  16th-bit-plane  embedding. 
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Fig.  8  Detector  performance  versus  compression  quality  factor  for 
“Peppers.” 


Figure  8  depicts  the  corresponding  correlation  output  at  dif¬ 
ferent  quality  factors  of  “Peppers”  and  different  embedding 
strengths.  It  is  interesting  to  see  that  even  at  a  quality  factor 
of  40%  (Matlab  JPEG  compression),  the  correlation  metric 
value  is  22.9.  The  corresponding  value  for  an  unmarked 
case  is  17.5.  Hence  the  marked  image  can  still  be  authen¬ 
ticated  against  the  unmarked  one.  We  can  even  tolerate  a 
little  more  compression,  if  the  embedding  plane  is  adjusted 
to  the  14th  bit  plane  as  shown.  For  a  smaller  strength  (12 
bit  planes,  for  example),  performance  degrades  slowly. 

5  Conclusion 

We  have  proposed  a  BPOF  signature-based  watermarking 
technique  for  image  authentication  applications.  Our 
method  is  extremely  useful  for  image  distribution  scenarios 
over  the  internet,  as  there  is  no  need  to  transmit  complex 
images,  thus  providing  a  significant  saving  in  bandwidth. 
Our  correlation-based  detector  demonstrates  a  robust  au¬ 
thentication  of  a  watermarked  image  as  distinguished  from 
an  unmarked  one.  Our  method  is  also  found  to  be  particu¬ 
larly  attractive  for  applications  where  it  is  desirable  to  tol¬ 
erate  image  compression.  As  shown,  the  addition  of  the 
watermark  is  context-sensitive,  to  make  it  harder  to  re¬ 
move. 

Further  work  can  be  done  on  variants  of  the  binary- 
phase-only  signature  with  respect  to  quantization  error  and 
correlation.  Multiple  bit  planes  embedding  with  additional 
cryptographic  components  can  also  be  pursued  to  address 
other  assurance  manifestations  and  robustness  issues.  One 
can  also  include  additional  (piggybacked)  information  in 
the  watermarking  scheme.  These  and  other  topics  will  be 
pursued  in  future  work. 
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